Ref 

# 


Hits 


Search Query 


DBS 


Default 


Plurals 


Time Stamp 


"'Si ] 


j."'"'.' X 


.zombie adj application 


USPAT; 


::OR "... 


OFF :", . 


: 200f/ll/15 11:50 








EPO; : 














DERWENT 










82 


(713/188} CCLS 


USPAT* 

\JO\J\J\f 

EPO; 

DERWENT 


OR 


OFF 


2004/10/24 17-09 


S3 


10 


( M denialadj2service n ).PN. : • 


USPAT; 


or: ....:: ■ 


OFF : 


2004/10/24 17:0? 








USOCR; 












; EPOjJ 

|: DERWENT ; ; 




















S4 


573 


denial adj2 service 


USPAT; 
EPO; 

DERWENT 


OR 


OFF 


2004/10/24 18:16 


S5 


; 303 


(denial adj2 service) and packet 


USPAT; 


OR 


OFF 


: 2004/10/24 17:09 








: EPO;i r 


























DERWENT ; 








S6 


337 


(denial adi2 serviced and Dacket 


USPAT; 
EPO; 

DERWENT 


OR 


ON 


2004/10/24 17-13 


: S7 : ; j 


: .4418 


without adj (receive or receiving) 


USPAT; ; 


or 


ON 


; 12004/10/24: 17: 10:; 








EPO; 














DERWENT ; 




















S8 

JO 


7 

/ 


f withm if arli frprpix/P nr rprpivinn^ 

and ((denial adj2 service) and 
packet) 


u jrn i / 

EPO; 

DcRWblN 1 


OR 


ON 


2004/10/74 17*1 1 


S9; 


225 


denial.ti; : ; : 


USPAT; I . : : 


:or 


ON : : 


: 2004/11/15 14:06 








EPO; 














DERWENT 












bcrvicc.u. 


UjrM 1 / 

EPO; 

DERWENT 






2004/10/24 17:11 


ffi::: 




denial.ti. and service.ti. ::; 


USPAT; 


! OR::: ' 


ON 


2004/10/24 17;11 : 




















DERWfcN 1 ; 








S12 


268 


(fdpnial adi2 <;prvirp^ and narkpH 
and (receive or receiving) 


USPAT- 
EPO; 

DERWENT 


OR 


ON 


2004/10/24 17:14 




162 


:((deniai;^dj2 service); and packet) : : : : 


USPAT; J 


;:ol:i:i:i:::i:i:i: 


ON, 


: : 2004/10/24:i7:15: 






and ((receive or receiving) with 
packet) ; 


epo;: : : . 

DERWENT: 






S14 


2 


DDOS.ti. 


USPAT; 
EPO; 

DERWENT 


OR 


ON 


2004/10/24 17:15 


: S15: :: 


: 48^ 


distributed adj. denial "* 


USPAT; 
EPO; 

DERWENT 


OR::' 


ON • 


2004/10/24 19:36: 
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S16 



S17: 



S18 



:si9: 



S20 



:s2ii 



S22 



S23: 



S24 



S25 



S26 



S2? : 



S28 



S29 ; ; 



S30 



S31! 



25 



: 49 



25 



"5983348" 



"5999932"! 



"6052788" 



11708 



receiving adj4 packet 



"not receiving" adj4 packet 



10 



"6108800" 



10 



44558 



2806 



•119 



117 



18: 



"6119236" 



pattern! and; behavior 



(pattern and behavior) and packet 



:(( pattern ; a nd | behavior) ; a nd \ 
packet) and denial ■:. 



(((pattern and behavior) and 
packet) and denial) and service 



"6154844":: 



61 



(denial adj2 service) and zombie 



! zombie! 



zombie and (denial adj2 service) 



(denial adj2 : seryice) ; and drone: 



USPAT; 
EPO; 

DERWENT 

USPAT;:!;; 
EPO; 

DERWENT 

USPAT; 
EPO; 

DERWENT 



USPAT; 
EPO; 
DERWENT 

USPAT; 
EPO; 

DERWENT 



USPAT; 
EPO; 
DERWENT: 

USPAT; 
EPO; 

DERWENT 



USPAT; 
EPO; 



DERWENT 

USPAT; 
EPO; 

DERWENT 



USPAT; 
EPO; . 
DERWENT 

USPAT; 
EPO; 

DERWENT 

USPAT; 
EPO; ! : 
DERWENT 

USPAT; 
EPO; 

DERWENT 

USPAT; : 
EPO;--: V 
DERWENT 

USPAT; 
EPO; 

DERWENT 



uspat; 
EPOy : 

DERWENT: 



OR 



OR! 



OR 



OR 



OR 



OR 



OR 



OR 



OR 



OR 



OR 



OR 



OR 



OR! 



OR 



OR! 



ON 



ON 



ON 



ON 



ON 



ON 



ON 



•On 



ON 



ON 



ON 



ON 



OFF 



ON 



ON 



ON 



2004/10/24 17:19 
20O4/10/24li7":20 
2004/10/24 17:20 
2004/10/2417:21 
2004/10/24 17:21 



2004/10/24rl7:22 
2004/10/24 17:24 
2004/10/24!l7:24 
2004/10/24 17:24 
2004/10/2417:24 



2004/10/24 18:14 



2004/10/2418:16 
2004/10/24 18:17 
2004/10/24li8:17 
2004/10/24 18:18 
2004/10/24:18:24 
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S32 



S33 



S34 



S35: 



S36 



S37 



S38 



S39- 



S40 



S42 



S43 



S44 



S45 



25 



41485 



9622 



12518 



14549 



.551 



451 



217315 



280 





n 




: 93 



















3958 



31 



4760 



102 



"6321338" 



packet same (receive or receiving 
or reception) 



(packet same (receive or receiving 
or reception)) and list 



(packet same (receive or receiving 
or reception j): a nd mon itdr 



(packet same (receive or receiving 
or reception)) and (monitor or 
monitoring) 



((packet same (receive or:! 
receiyingj or: reception)) and 
(monitbror monitoring)) and 
(denial or flooding) : : 



((packet same (receive or 
receiving or reception)) and 
(monitor or monitoring)) and 
attack 



(receive or receiving).ti .: 



(((packet same (receive or 
receiving or reception)) and 
(monitor or monitoring)) and 
attack) and (pattern or behavior) 



((((packet same (receive or 
receiving or reception)) and 
(monitor or \ monitoring) ) and 
: attack) and (pattern • or behavior)) . 
and (denial briflood or flooding) i 

attack.ti. 



attack.ti . and (flood or flooding) ; 
(flood orflooding).ti. 



((flood or flo^ing).t|;) and 
netWork. 



USPAT; 
EPO; 

DERWENT 



USPAT; : 
EPO;:.: \ 
DERWENT 

USPAT; 
EPO; 

DERWENT 

USPAT; 
EPO; : : 
DERWENT 

USPAT; 
EPO; 

DERWENT 



USPAT; 
EPO;; ! 
DERWENT: 



USPAT; 
EPO; 

DERWENT 



USPAT; 
EPO; 
DERWENT 

USPAT; 
EPO; 

DERWENT 

USPAT; : 
EPO; :: i i 
DERWENT 



USPAT; 
EPO; 

DERWENT 

USPAT; ::; 
EPO; 

DERWENT : 



USPAT; 
EPO; 

DERWENT 

USPAT; 1 : 
EPO; 

DERWENT 



OR 



OR 



OR 



OR 



OR 



OR 



OR 



OR 



OR 



OR 



OR 



OR 



OR 



OR 



ON 



ON 



ON 



ON 



ON 



ON 



ON 



ON 



ON 



ON 



ON 



ON 



ON 



ON 



2004/10/24 18:26 
2004/10/24 18:26 
2004/10/24 18:27 
2004/10/24:18:27 
2004/10/24 18:27 
2004/10/24 19:34 



2004/10/24 18:28 

2004/10/24 18:28 ■ 
2004/10/24 18:29 

2004/10/24 19:33 



2004/10/24 18:32 
2004/10/24 19:07 : ; 
2004/10/24 18:35 
2004/10/2418:42 
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S46 



S47 



S48 



S49; 



S50 



S51 



S52 



553:!' 



S54 



S5S 



S56 



S57 



S58 



S59 



S60 



S61 



11 



23 



69 



1661310 



52 



994 



10 



h:"2 



"6412000" 



"6088804". 



(without adj receiving) adj5 packet 
("not" adj receiving) adj5packet 
('not' adj receiving) adj5 packet 
"nof'ladj receiving 
"not receiving" 



'not: 



'not' adj receiving 
'not receiving! 



'not' same receive 



rate adj receiving 



"6044402" 



"5850515" 



"5581559" 



: tra nsmitting ;adj \ withbut adj i 
'receiving" 



USPAT; 
EPO; 

DERWEIMT 

USPAT; i: : 
EPO; : 
DERWENT 

USPAT; 
EPO; 

DERWEIMT 

USPAT; 
EPO;^ 
DERWENT 



USPAT; 
EPO; 

DERWENT 

USPAT; : . 
EPO; . 
DERWENT: 

USPAT; 
EPO; 

DERWENT 



USPAT; 
EPO; 

DERWENT ; 

USPAT; 
EPO; 

DERWENT 

USPAT; 
EPO; : 
DERWENT 



USPAT; 
EPO; 

DERWENT 



USPAT; 
EPO; . 
DERWENT 

USPAT; 
EPO; 

DERWENT 

USPAT; 
EPO; 

DERWENT 

USPAT; 
EPO; 

DERWENT 

USPAT; - 
EPO;[ : ;i : 
DERWENT- 



OR 



OR 



OR 



OR 



OR 



OR 



OR 



OR 



OR 



OR 



OR 



OR: 



OR 



OR; 



OR 



OR- 



ON 



ON 



ON 



ON 



ON 



ON 



ON 



ON 



ON 



ON 











ON 



ON 



ON 



ON 



ON 



:qn. 



2004/10/24 18:45 
2004/10/24 18:52 
2004/10/24 18:59 
2004/10/24 18:49 
2004/10/24 18:49 
20Q4/10/24 18:50 
2004/10/24 18:49 
2004/10/2418:50 
2004/10/24 18:50 
2004/10/24 18:50 
2004/10/24 18:52 
2004/10/24 18:52 



2004/10/24 18:54 
2004/10/24 18:54 
2004/10/24 18:54 
2004/10/24 18:55] 
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S62 



S63 



S64 



S65 



S66 



S67: 



S68 



S69 



S70 



S71 



S72 



S73 



S74 



S75: 



S76 



577 



48 



412 



"5455865" 



sender same idle 



243 



54 



57 



sender with idle 



(senden with idle) aricT (network 
and packet) 



(pattern adj2 packet) with 
(transmission or reception) 



packet adj reception adj pattern 



ping.ti. and flood.ti. 
ping .ti Liahd j floodi ng.tr: 
ping.ti. and attack.ti 
pihg.ti.and 



bbmb.ti 



icmp.ti. and flood.ti. 
icmp.ti. and flooding.ti. 



18 



1164 : 



"5822434" 



drone or zombie 



159 



26 



(drone or zombie) and network 



;((drone or zombie) and jnetwork) 
rand: attack 



USPAT; 
EPO; 

DERWENT 

USPAT; "A 
EPO;. 
DERWENT : 

USPAT; 
EPO; 

DERWENT 

USPAT; ; 
EPO; 

DERWENT 

USPAT; 
EPO; 

DERWENT 



USPAT; 
EPO;. 
DERWENT 



USPAT; 
EPO; 

DERWENT 

USPAT; 
EPO; : 
DERWENT 

USPAT; 
EPO; 

DERWENT 



USPAT; 

EPO;]; 
DERWENT ; 

USPAT; 
EPO; 

DERWENT 

USPAT; 
EPO; ; 
DERWENT:i 

USPAT; 
EPO; 

DERWENT 

USPAT; '"-H 
EPO; 

DERWENJ 

USPAT; 
EPO; 

DERWENT 

USPAT; 

:EPO;; : ;:: 
DERWENT. i 



OR 



OR; 



OR 



OR 



OR 



OR 



OR 



OR: 



OR 



OR 



ON 



ON 



ON 



ON 



ON 



ON 



ON 



:0N 



ON 



ON 



ON 



ON 



ON 



ON 



ON 



ON 



2004/10/24 19:03 



2004/10/24 19:03 



2004/10/24 19:03 



2004/10/24 19:04: 



2004/10/24 19:09 



2004/10/24: 19: 10 



2004/10/24 19:15 



2004/10/24 19:15 



2004/10/24 19:15 



2004/10/24 



19:15 



2004/10/24 19:15 



2004/10/24 19:15 



2004/10/24 19:34 



2004/10/24 19:36 : 



2004/10/24 19:37 



2004/10/24:19:38 
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S78 



S79 



S80 



S81 



S82 



S83: 



S84 



S85; 



S86 



261 



865 : 



285 



45i 



56839 



■11027 



inbound adj traffic 



incoming 1 adj traffic 



(inbound adj traffic) or (incoming 
adj traffic) and attack 

((iribburidadj traffic) bri (incoming 
adj traffic)) and attack ;: 



outgoing or outbound 



(outgoing ;or outbound) and traffic 



34 



31 



988 



(((inbound adj traffic) or 
(incoming adj traffic)) and attack) 
and ((outgoing or outbound) and 
traffic) 

traffic adj log 



(receiving or receive) adj log 



USPAT; 
EPO; 

DERWENT 

USPAT; 7 
EPO; : 
.DERWENT: 

USPAT; 
EPO; 

DERWENT 

: USPAlf : : 

: Ep0; . 

DERWENT 



USPAT; 
EPO; 

DERWENT 

USPAT; 
EPO; ■ : = 
DERWENT 

USPAT; 
EPO; 

DERWENT 

USPAT;: : 
EPO; r 
DERWENT 



USPAT; 
EPO; 

DERWENT 



OR 



OR 



OR 



OR 



OR 



OR ; 



OR 



OR ; 



OR 



ON 



ON 



ON 



ON 



ON 



ON 



ON 



ON 



ON 



2004/10/24 19:38 
20Wl6/24 19:38 
2004/10/24 19:38 
20(^/10/24 19:3?; 
2004/10/24 19:39 
2004/10/24 19:39 
2004/10/24 19:40 

2004/10/24 19:44 
2004/10/24 19:45 
2004/10/24 19:45 



S87: 



S88 



S89 



S90 



S91 



S92 



22 



((receiying or recejye) adj log) 
(flooding or flood or denial) 



and 



USPAT; 



EPO; 
DERWENT 



OR 



drone adj program 



idrone adj application 



zombie adj program 



zombie adj application 



180 



packet adj monitor 



USPAT; 
EPO; 

DERWENT 

USPAT; 
EPO; 

DERWENT 

USPAT; 
EPO; 

DERWENT 

USPAT; : 
EPO; ; r r 

DERWENT 

USPAT; 
EPO; 

DERWENT 



OR 



OR 



OR 



OR 



OR 



ON: 



ON 



QN 



ON 



ON 



ON 



2004/10/28 10:13 
2004/10/28 10:13 
2004/10/28 10:13 
i004/ld/28 10:18 
2004/10/28 10:20 
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oat 

S93 


A Af\ 

449 


(370/229).CCLS. 


USPAT; 
USOCR; 
EPO; 

DERWENT 


OR 


OFF 


2004/10/28 10:20 


S94 


............... . 

660 


(370/230).CCLS. 


USPAT; 
: USOCR; • 
; EPO; 

..DERWENT,. 


: y\ry:':' 

OR .: 


OFF 


2004/10/28 10:20: 














S95 


247 


f370/231).CCLS. 


USPAT; 
USOCR; 
EPO; 

DERWENT 


OR 


OFF 


2004/10/28 10"20 


I S96 ! 


•;M;^39>- 


(370/232).CCLS. : 


USPAT; 

USOCR; :l-rl 

EPO; ! 


OR! : 


OFF •;: 


2004)10/28 10:20 ^ 




















DERWENJ 










1 07 
1U/ 




1 IQPAT- 

USOCR; 
EPO; 

DERWENT 


UK 


OPP 

urr 


*5nn4/in/9Q *ino*3 
ZUU < t/1U//o jlu.^j 


S98 ; 


1752 


(diSCard or blOGk);adj packet!:!:!:; ; ;: :!: 


^ USPAT; ! 


OR 


ON 


2004/10/28 10:24 




•EPO; : 






















M DERWENT 








S99 


1752 


((discard or block) adj packet) 


USPAT; 
FPO' 

UCZKVVCIM 1 


OR 


ON 


2004/10/28 10:24 


SIO 


: 35 


((discard or block)adj packet) : :: : ;: 


USPAT;: :: 


OR 


ON ] 


2004/10/28 10:31; 


0 - 




adj5(applicatibn!or program br!^;^^^!!i 


EPO; : ; 












client) 


DERWENT i: 








SIO 
1 


10 


pattern adj3 (packet adj 
transmission) 


USPAT; 
EPO; 

DERWENT 


OR 


ON 


2004/10/28 10:25 


SIO 


6365 : 


behavior and packet : 


USRAT; • 


OR : 


ON 


2004/10/28: id:32 


2 






■ EPO; : 
I: DERWENT • 




















SIO 
3 


6063 


(behavior and packet) and 
(application or program or client) 


USPAT; 
EPO; 

DERWENT 


OR 


ON 


2004/10/28 10:32 


; sid 

4 •; 


S. ]:1861 


(behavior - and pa^^ and : 
(behavior same (application or; 


USPAT;i • : 
EPO; 


.OR! : ;: 


JQN; : ;> : 


2004/10/28 10:33 '■■ 






ipfbgram or client)) ; ;: ' :: 


DERVVENT ; 








SIO 
5 


1000 


(behavior and packet) and 
^Denavior wiin (application or 
program or client)) 


USPAT; 
con- 

DERWENT 


OR 


ON 


2004/10/28 10:33 


; blU ; : 

;.6 : ; "\ 


949 ; = 


((behavior and jpacket); and! ;;; ;!; 
;:(b6hayior;with (applicatjonbr; ; i : ;;:;;; 


; USPAT; ; 
EPO; . 


QR;: : 


;ON : ; 


2004/1 0/28 ; 10: 34 ; 




liprbgram or client))) and (discard ; 


DERWENT 












Tor block or monitor); "i :j 
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C1 A 

SIO 
7 


*\77 


(((behavior and packet) and 
(behavior with (application or 
program or client))) and (discard 

or block or monitor)) and pattern 


1 ICDAT. 

USPAT; 
EPO; 

DERWENT 


OR 


ON 


2004/10/28 10:34 


; sio: 

o 
o 


1 477 ; 


((((behavior and packet) and : : 
(behavior with (application or ^ i: ; : : ; 


i USPAT; .. ;:: 
trU; 


: or ' : 


ON ; 


2004/10/28:10:34 






program or client))) and (discard 
or block or monitor)) and : pattern) : 


DERWENT 












arid (applicatioh or program) 










SIO 
9 


380 


(((((behavior and packet) and 
(behavior with (application or 
program or client^ a no ^aiscara 
or block or monitor)) and pattern) 
and f amplication or nrooram^ and 
list 


USPAT; 
EPO; 

HPDVA/PMT 


OR 


ON 


2004/10/28 10:49 


Sll 

0 : : 


. ' 59 1 J 


denial adj2 service 


USPAT; 

/EPO;; . 


i : OR 




2004/10/2810:49 








DERWENT 








oil 

l 

: Sll: Li: 


u 

; : 483 


aeniai auj or aoj service 
denial: adj: service: 


1 ICDAT* 
UorA 1 , 

EPO; 

DERWENT 
USPAT; 


OR 

;:PR::! : ; 


UIN 

:;0N:::::i:!:: 


mriA/A c\f)Q liven 
^ULrt/lU/^o IU.dU 

2004/10/28 io:5o:: 


2 ,;;=• 






EPO; ; 
1 DERWENT 






Sll 

J 


58 


(denial adj service).ti. 


USPAT; 

LrU, 

DERWENT 


OR 


ON 


2004/10/28 11:00 


Sll; 


'■'X 1187 


zombie or drone or stooge : : 


USPAT; 


or : : 


ON i; 


2004/10/28 11:01 








;-EPO;k --I:; 














DERWENT i 








<;i 1 
5 


i n 


l^oiiiuic or uroiic or biooycj auj<i 

(client or application or program 

or con/or^ 
Or DClVCly 


1 l<;PAT- 
UjrM 1 , 

EPO; 

HPRWFNT 

L/t-KWCIN 1 




ON 


^UU'r/lU/^O 11. Ol 


Sll 


: ;.:! ;1170. 


spoofed or spoof or spoofing 


; USPAT; 


OR 


on 


2004/10/28 11:03: 


6 i 






EPO; : 
j DERWENT: li; 




















Sll 
7 


318 


(spoofed or spoof or spoofing) and 
attack 


USPAT; 
EPO; 

DERWENT 


OR 


ON 


2004/10/28 11:34 


Sll 


.76 


(spoofed or spoof or spoofing).ti. 


USPAT; 
i EPO;; : 
DERWENT : 


6r ; ; ; 


ON ' 


2004/16/28 11:04 












Sll 
9 


15 


((spoofed or spoof or spoofing).ti.) 
and (attack or fraudulent) 


USPAT; 
EPO; 

DERWENT 


OR 


ON 


2004/10/28 11:05 


:: S12-r 

'°y :: 


; : h ; , 5255 


application near4 list : 


^ USPAT; m. 
EPO;:. .. 
! DERWENT. ; 


!ORj V:' 1 -!.::. 


:ON>ji::C 


■ 2004/10/28:11:34 j 
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S12 
1 


262 


(application near4 list) and attack 


USPAT; 
EPO; 

DERWENT 


OR 


ON 


2004/10/28 11:34 


S12:i 

2 ; ; 


: 100 


((application: near4 list) arid 
attack) and packet! .:. 




uspatI 
: FPn-. : : : 




OR 


ON . : 


2004/10/28 12:55 






DERWENT 








S12 
3 


25 


"6002772" 




USPAT; 

EPO; 

DERWEr 




OR 


ON 


2004/10/28 12:56 


si2 

,4 


456:: 


: 713/182 :! : ;: 




USPAT; 
EPO; ,:: 




OR 


ON ! 


; 2004/11/08:17:39 
















DERWEr 


sIT 








S12 
5 


1599 


(709/223).CCLS. 




USPAT; 
USOCR 




OR 


OFF 


2004/11/08 17:39 


si2 ; : 

6 :;: : 


1943 


(709/224).CCLS. ; 




USPAT; 
USOCR 

USPAT; 
USOCR 




OR | 


OFF 


: 2004/11/08 17:40 


S12 
7 


867 


(709/225).CCLS. 






OR 


OFF 


2004/11/08 17:39 


S12 




(7013/182 or ((709/223).GGL 


S,) or,; 


: USPATk 




OR 


;OFF ; : 


;;2004/iJ/08 17:41 


8 




i ((709/224);GCLS;) bri ((709/225). : 
















: CGLS.)) and zombie 














S12 
9 


4074 


713/182 or ((709/223).CCLS.) or 
((709/224).CCL5.) or ((709/225). 
COS.) 


USPAT 




OR 


OFF 


2004/11/08 17:44 


S13 


210 : 


; (713/182 or ((709/223).GCLSO or i : : 


USPAT 




or : 


OFF h 


2004/11/08:17:44 


0 




((709/224);GCLS.) 6ri ((709/ 


225).. 
















CCLS.)) and (dos or ddos); 














S13 
5 


124 


ACL and firewall 




USPAT; 
EPO; 

DERWENT 


OR 


ON 


2004/11/10 17:09 




849 


accessed] control adj list! 




USPAT;; 




OR 


ON 


2004/11/10:17:09 


6 ! 






EPO; : 


AT:-: 








S13 
7 


6159 


firewall 




USPAT; 
EPO; 

DERWENT 


OR 


ON 


2004/11/10 17:01 


S13 ! 
8 


194 


S136 arid S137 




USPAT; 
EPO; = 




OR 


ON 


2004/11/10 17:04; 










UCKVyCIN 1 








S13 
9 


57 


watch adj list 




USPAT; 
EPO; 

DERWENT 


OR 


ON 


2004/11/10 17:02 


; si4 : :: ; 




: Si39 ahd S137 : H ;: 




USPAT;; 




OR ' '!!! 


ON 


2004/11/1017:03;: 










EPO;;.; . 
DERWENT; ' 








S14 
1 


86 


S138 and (flood or flooding or 
ddos or attack) 


USPAT; 
EPO; 

DERWENT 


OR 


ON . 


2004/11/10 17:04 
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S14 
2 


50 


ACL.ti. 


USPAT; 
EPO; 

DERWENT 


OR 


ON 


2004/11/10 17:09 


S14 i 

iiliilil! 


;■ ■ 0 ' 


S142 arid firewall- ;• 


USPAT; : : 
EPO; :::: 
DERWENT 


OR;; • ; 


;ON 


; 2004/11/10 17:09 i 














S14 

A 
t 


56 


(access adj control adj list).ti. 


USPAT; 

CrU, 

DERWENT 


OR 


ON 


2004/11/10 17:10 


SIA? 

: . ; 


103 


si42 or si44 ;: ; : 


.USPAT; 
EPO; . . 


OR : T 


ON : 


2004/11/10 17:10:: 








■DERWENT; : . 








S14 
6 


8 


S145 and (pattern or behavior) 


USPAT; 
EPO; 

DERWENT 


OR 


ON 


2004/11/10 17:12 


S14 


Q100 ' 


blocking adj reception 


USPAT; j : 
EPO; j: 
DERWENT ; 


Hlllll 


on ; 


2004/11/10 17:27 


7 












8 




uiocKiny adj uanbrnibbion 


EPO; 

DERWENT 


no 

UK 


UIM 


1 /in 1 7«1 o 


r S14 : : 


:j: 4684 


::blOCk adj: trarismiSSion:::;^:^:^:^^: : 


USPAT; : 


OR :!• *. 


ON i 


7.004/li/lO 17:12: 








EPO;; i:-:'- 














DERWENT 








S15 
0 


485 


hlork arii rprpntion 

VJ Ivv IX 0\JJ 1 Uvvwllvl 1 


USPAT- 

EPO; 

DERWENT 


OR 


ON 


2004/11/10 17" 12 


i:-S15 : :i 


• 198 


block adj client : j:; 


USPAT; 


OR 


ON 


2004/11/1017:12 


:■!:;■=:!: 






EPO; 














DERWENT 








S15 
2 


31 


blocking adj client 


USPAT; 
EPO; 

DERWENT 


OR 


ON 


2004/11/10 17:12 


S15 

3 :; 


. 6474 : 


S147 or S148 or S149 or S150 or 

:;s||^:sM^ 


USPAT; ;. 
EPO; : . 
DERWENT 


or ; 


ON : 


2004/11/10.17:12 


S15 
4 


704 


S153 and list 


USPAT; 
EPO; 

nFD\A/FMT 
UCKVVCIM 1 


OR 


ON 


2004/11/10 17:13 


sis 

; -5'- •; 


;-8i 


S154 and (denial adj2 service) ■ [ 


USPAT; i: 
EPO; ; ' . 
DERWENT 


OR ; •• 




; 200471 J/^6 17:13 


S15 
6 


36 


SI 54 and (attack) 


USPAT; 
EPO; 

DERWENT 


OR 


ON 


2004/11/10 17:14 


S15> 

\7l.-X 


;' : "-:::' ! ' : '194 . 


(713/151).CCLS.; 


US-PGPUB; 
USPAt ; : •; 


OR :. • : 




2004/ll/iQ;i;7:16! 
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S15 
8 

; S15 

S16 
0 

si6: 

1.:: 

S16 
2 

S16i! 

S16 
4 



S16; 

S16 
6 



:si6: 

S16 
8 

S16" 

:$.!::• 

S17 
0 

/SI?! 

S17 
2 

S17 

•3. : .; . 

S17 
4 

SIX; 

5.;:: 



76 

-89; 

330 

".'.73' 
6018 
{ 462 



(713/154).CCLS. 



(7i3/152).CCLS. 



S157 or S158 or S159 
S160 and attack 

(host or client) with (behavior or 
pattern) 



Si62and attack : 



140 



S163 and packet 



79 
4 



:S164and;firewall:: 
S147 and client 



129: 



blocking: adj ipacket 



6596 



746 



S153 or S167 



S168 arid list ; 



305 



S169 and packet 



20 



S170:and:attack 



755 



203 



203 



■■:S- 



block adj list 



blocked adj ; (programs: orisoftwa re;; 
or clients or applications) 



blocked adj (program or software 
or client or application) 



S174 and firewall ; 



US-PGPUB; 
USPAT 

US-PGPUB; 
USPAT.. 

US-PGPUB; 
USPAT 

US-PGPUB; 
USPAT : 

US-PGPUB; 
USPAT 



US-PGPUB; 
USPAT 



US-PGPUB; 
USPAT 



US-PGPUB;: 
USPAT "■' : 



USPAT; 
EPO; 

DERWENT 



USPAT; 

;epo-: ; 

P|R\#ENT 

USPAT; 
EPO; 

DERWENT 



USPAT; 



EPO;:: 
DERWENT 



USPAT; 
EPO; 

DERWENT 

USPAT; 
EPO; 
DERWENT; 



USPAT; 
EPO; 

DERWENT 
USPAT; 1 

ep6; 

DERWENT: 

USPAT; 
EPO; 

DERWENT 
USPAT;:; 

epo; ';:: = :• 

DERWENT : 



OR 

or; 

OR 
OR 



OR 



OR 
OR 
OR 



OR 



OR 



OR 



OR 



OR 



OR 



OR 



OR 



OR 



or: 



OFF 



OFF 



OFF 



OFF 



OFF 



OFF 



OFF 



OFF 



ON 



ON: 



ON 



ON 



ON 



on: 



ON 



ON 



ON 



!ON. 



2004/11/10 17:16 



2004/11/10 17:15 . 



2004/11/10 17:16 



2004/11/10 17:17 



2004/11/10 17:18 



:2004/ll/10 17:18 



2004/11/10 17:18 



2004/11/1017:18 ; 



2004/11/10 17:28 



2004/1 1/10; 17:29 



2004/11/10 17:29 
2004/11/10 17:29 



2004/11/10 17:29 
2004^11/10 17:31 



2004/11/10 17:31 
2004/11/1017:32 
2004/11/10 17:32 
•2 : d04/ii/i6- 17:33.. 
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S17 
6 

;si7: 

7 , : : 

S17 
8 

S17 

.91;; 

S18 
0 

S18 

1 : : 

S18 
2 

sial 

:3 rfh 



S18 
4 

S18l 
5 



S18 
6 

S18 
7 

S18 
8 

S18 

:9i:-: 

S19 
0 

S19 

1 ; ■ 



132 



34 



48 



97 



18 



59 



b± 26 



170158 



77 



14 



249 



12; 



S172 and firewall 



: pattern same (packet adj 
transmission) : . 

"5884025" 



:."5842040" : 



"5826014" 



"5822434" 



"5604803" 



:,, 5481611" j 



network.ti. 



SI 84 and attack.ti. 



DDOS.ti. 



i d istributed .ti. i and attack. ti. 



"6,471,068" 



"20030014654" : 



threshold adj analysis 



; S190 and attack ; 



USPAT; 
EPO; 

DERWENT 

USPAT;-: 
EPO; :. 
DERWENT 

USPAT; 
EPO; 

DERWENT 

USPAT; 
EPO; 
DERWENT 



USPAT; 
EPO; 

DERWENT 



USPAT; 

epO; 

DERWENT 

USPAT; 
EPO; 

DERWENT 



USPAT; 
EPO;; 
DERWENT 



USPAT; 
EPO; 

DERWENT 



USPAT; 
EPO;: 
DERWENT 

USPAT; 
EPO; 

DERWENT 

USPAT; 
EPO; 
DERWENT 

USPAT; 
EPO; 

DERWENT 

USPAT; 

EPO;:: 

DERWENT 

USPAT; 
EPO; 

DERWENT 

USPAT; 

:EPO; I- 
DERWENT 



OR 



OR 



OR 



OR 



OR 



OR 



OR 



OR 



OR 



OR: 



OR 



OR 



OR 



OR 



OR 



OR 



ON 



OFF 



OFF 



OFF 



OFF 



OFF 



OFF 



OFF 



OFF 



OFF 



OFF 



OFF 



OFF 



ON 



ON 



ON 



2004/11/10 17:33 



2004/11/15 12:13 



2004/11/15 12:13 



2004/11715 12:15 



2004/11/15 12:13 



2004/11/15 12:14 



2004/11/15 12:17 



2004/11/15 12:14 



2004/11/15 12:18 



2004/11/15 12:53 



2004/11/15 12:54 



2004/11/15 14:02 



2004/11/15 14:02 



2004/11/15 17:22 



2004/11/15 17:22 



2004/11/15 17:23 
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S19 
2 

:si9. 

3j;- 

S19 
4 

S19 

5 ;. 

S19 
6 

SI* 



S19 
8 

S19i 
9 



S20 
0 

S20 ; 

S20 
2 

S20 

3 , 

S20 
4 

S20- 
5 : 



19189 



1425711 : 



2343 



49773 



8516 



256 



network adj connection 



ratio 



S192 and S193 



ratio same (connection or 
transmitting or trasmit) : 

S195 and network 



S196:and: attack ; 



89 ICMP and ratio 



17 S198 and attack 



rarely adj receiving adj2 packet 



114991 : 



37300 



attack 



140 



2219 



49 



error near8 (receive or receiving 
or reception) 

S201 and S202 and packet 



(error near8 (receive or receiving 
or reception)) same packet 

S204 and S201 



USPAT; 
EPO; 

DERWENT 
USPAT; - 

epo-: 

DERWENT 

USPAT; 
EPO; 

DERWENT 

USPAT; : 
EPO; 

DERWENT 

USPAT; 
EPO; 

DERWENT 



USPAT;: 
EPO;;; 



DERWENT.:; 



USPAT; 
EPO; 

DERWENT 



USPAT; 
EP6; f 
DERWENT: 



USPAT; 
EPO; 

DERWENT 



USPAT;; 
EPO;; : i 



DERWENT: 



USPAT; 
EPO; 

DERWENT 

USPAT; 
EPO; 

DERWENT 

USPAT; 
EPO; 

DERWENT 

USPAT; 
EPO; l'. .,:. 
: DERWENT 



OR 



OR 



OR 



OR 



OR 



OR 



OR 



OR 



OR 



OR 



OR 



OR 



OR 



OR : 



ON 



ON 



ON 



ON 



ON 



ON 



ON 



ON 



ON 



ION 



ON 



ON 



ON 



ON 



2004/11/15 17:39 
2004/11/15; 17:39 
2004/11/15 17:39 
2004/11/15 17:40 
2004/11/15 17:40 



2004/11/15 17:40 



2004/11/15 17:40 
2004/11/15: 17:47: 



2004/11/15 17:53 



2004/11/15 17:53: 



2004/11/15 17:53 
2004/11/15 17:53 
2004/11/15 17:53 
:2004/ll/15 17:53 
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